Step 3: Reviewing Scan Results

About this task

When the scan is complete, the results are summarized in the Dashboard view. In Data and Issues views the results are shown in three areas: the Application tree, the Result list, and the Detail pane. The type of information presented in each area depends on the View selected (default is Issues view).

Procedure

To access a view, click the View selector on the left side of the screen.
View Description
Dashboard

The dashboard shows a summary of the scan's configuration, status, data and results.

Data

Data view showss lists of content items found in your application. This can be a useful way of verifying that the scan is configured in a way that will cover your application, before you begin the Test stage.

  • Application tree: Shows the URL and folder nodes.
  • Result list: Shows application data, sorted by scan results (see Data: Result list). For example, you can choose to see a list of broken links, of JavaScript, of cookies, and so on.
  • Detail pane: Shows the request sent to a page and the response that was received.

To learn more about the Application Data view, see Data.

Issues

Issues view provides comprehensive data of the security issues discovered by the scan.

  • Application tree: Shows the folders, URLs, and files that AppScan discovered in your application are listed. The number next to each node in the tree indicates how many issues were found.
  • Result list: Shows an icon per issue, indicating the severity value that is assigned to this issue (see Issues: Result list). Each issue also holds a consolidation of the URLs that are vulnerable to this issue. Under each URL, is a listing of the vulnerable data.
  • Detail pane: Displays information to enable you to understand why this is an issue, what it can do if gone untreated, how to fix, the variants of the test requests that were sent, the response of your application for which AppScan marked the test as an issue, and more.

To learn more about the Issues view, see Issues.

Scan log

The scan log can be opened or closed from all views, using the Scan log icon at the right side of the status bar at the bottom of the screen.

See Step 4: Working with results.